Lack of data validation - Path Traversal In sharpziplib
Description
Improper Limitation of a Pathname to a Restricted Directory in SharpZipLib SharpZipLib before 1.0 RC1 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 nuget | 1.0.0-rc1 | ||
 debian 12 | 5.18.0.240+dfsg-1 | ||
debian 13 | 5.18.0.240+dfsg-1 | ||
debian 14 | 5.18.0.240+dfsg-1 | ||
debian 11 | 5.18.0.240+dfsg-1 |
Aliases
1. 2. 3. 4. 5. 6.
References
1. 2.